source: mod_gnutls/README @ 6e6a4e4

asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream
Last change on this file since 6e6a4e4 was 0de1839, checked in by Thomas Klute <thomas2.klute@…>, 6 years ago

Support X.509 auth for TLS proxy connections

This commit adds support for X.509 certificate based authentication for
TLS proxy back end connections, including both server certificate
checking and (optionally) TLS client authentication. Some functions used
for this require GnuTLS 3.1.4 or later, so requirements change
accordingly.

Three new configuration parameters are added:

GnuTLSProxyCAFile FILEPATH

The given file must contain trusted CA certificates for server
verification. Required.

GnuTLSProxyKeyFile FILEPATH
GnuTLSProxyCertificateFile FILEPATH

Key and certificate for TLS client auth towards TLS back end servers. If
not set, TLS client auth is disabled.
  • Property mode set to 100644
File size: 991 bytes
RevLine 
[04f48a2]1mod_gnutls, Apache GnuTLS module
2================================
[6af4f74]3
[04f48a2]4  https://mod.gnutls.org/
[6af4f74]5
[04f48a2]6Mailing List:
[6af4f74]7
[04f48a2]8  mod_gnutls development <mod_gnutls-devel@lists.gnutls.org>
[6af4f74]9
[04f48a2]10Lead Maintainer:
[6af4f74]11
[04f48a2]12  Daniel Kahn Gillmor <dkg@fifthhorseman.net>
[6af4f74]13
[04f48a2]14Past maintainers and other contributors:
[7bebb42]15
[04f48a2]16  Paul Querna <chip at force-elite.com>
17  Nikos Mavrogiannopoulos <nmav at gnutls.org>
18  Dash Shendy <neuromancer at dash.za.net>
[c4ba9722]19  Thomas Klute <thomas2.klute@uni-dortmund.de>
[6af4f74]20
[04f48a2]21Prerequisites
22-------------
[6af4f74]23
[0de1839]24 * GnuTLS          >= 3.1.4 <http://www.gnutls.org/>
[04f48a2]25 * Apache HTTPD    >= 2.2 <http://httpd.apache.org/> (2.4.* preferred)
26 * autotools & gcc
27 * APR Memcache    >= 0.7.0 (Optional)
28 * libmsv          >= 0.1 (Optional)
[6af4f74]29
[04f48a2]30Installation
31------------
[6af4f74]32
[04f48a2]33 tar xzvf mod_gnutls-version.tar.gz
34 cd mod_gnutls-version/
35 autoreconf -fiv
36 ./configure --with-apxs=PATH --enable-msva
37 make
38 make install
39 # Configure & restart apache
[6af4f74]40
[04f48a2]41Configuration
42-------------
[6af4f74]43
[04f48a2]44 Please see doc/mod_gnutls_manual.mdwn for more details.
Note: See TracBrowser for help on using the repository browser.